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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior 
versions, and listings of claims in the application: 

LISTING OF CLAIMS : 

1-15. (cancelled) 

16. (currently amended) A traceable method for 
encrypting and/or decrypting data broadcast by at least one 
transmitter towards several decoders, this method enabling the 
identification of a traitor, amongst different lawful users of 
the decoders, who has communicated secret data to a non- 
authorized third party so that this third party is able to 
encrypt and/or decrypt data broadcast by the transmitter, 

in which: 

- during encryption of the broadcast data, the 
transmitter applies at least a first secret cryptographic 
function, and 

- during decryption of said broadcast data, all the 
decoders apply at least one same second secret cryptographic 
function identical to said first function or its inverse, each 
decoder having recourse for this purpose to a mathematical 
description of said second function recorded in a memory, 

wherein during the application of the second function 
the mathematical description of this second function, to which 
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each decoder has recourse, is different from one decoder to 
another or from one group of decoders to another so that the 
mathematical description to which recourse is made exclusively 
identifies the particular decoder or group of decoders among all 
the decoders ; and 

wherein said mathematical description (F Ki ) recorded in 
the memory of each decoder is formed of several elementary 
functions (G j, -j ) which must be composed with each other in a 
determined order to form said second secret function . 

17. (previously presented) The method as in claim 16, 
wherein the second cryptographic function is able to process non- 
redundant data. 

18. (cancelled) 

19. (currently amended) The method as in claim-^r& 16 , 
wherein each elementary function (G if j) is equal to the composite 
of at least three functions as per one of the following 
equations : 

Gi,j = f ' i, j og CTj (I, OS 
G 2 ,j = f ' 2 , j og oj ( 2 ) ofi, j 



Gr-l,j = f 'r-l,j Og oj (r _i) Of r _ 2 ,j 

G r , 3 = t og oj (r) of r _i fj 
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in which: 

- G i( j is the -th elementary function of decoder j, j 
being the index identifying a decoder or group of decoders, 

- functions fj^j and f ' i,j are predefined functions 
able to render the elementary functions Gi,j non-commutative 
between each other, 

- CTj is a permutation of all indices {1; r}unique to 
each decoder or group of decoders, 

- g 0 j (t ) is the CTj(t) -th function of a predefined whole 
formed of r non-linear predefined functions gi commutative 
between each other, and 

- S and T are predefined functions able to render 
difficult the cryptanalysis of elementary functions G lr j and G r ,j 
respectively, 

20. (previously presented) The method as in claim 19, 

-1 

wherein each function f '-m is equal to the inverse f of 

ij 

function f±,j. 

21. (previously presented) The method as in claim 19, 
wherein the functions f ±j j are linear functions of a set (L n ) of 
the tuples of elements of a finished body (L) on itself. 
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22. (previously presented) The method as in claim 19, 
wherein the functions S and T are invertible. 

23. (previously presented) The method as in claim 19, 
wherein the functions S and T are linear functions of a set (L n ) 
of the tuples of elements of a finished body (L) towards itself. 

24. (previously presented) The method as in claim 19, 
wherein the functions gi are chosen so that each elementary 
function Gi f j corresponds to an encryption block of a 
multivariate encryption algorithm. 

25. (previously presented) The method as in claim 19, 
wherein each function g ± is of the form gi(a) = a ei in which a is 
an element of an L' extension of degree n of a basic body L with 
q elements, and e± is a predefined exponent. 

26. (previously presented) The method as in claim 25, 
wherein the exponent ei is of the form : 

1 01 r r 8J, , di 6d-i . . . . . 

l+ g + ...[[ +g ] ] + g + ...+g , m which the exponents 

0i are predefined integers. 
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27. (previously presented) A computer-readable 
recording medium with a computer program recorded thereon, the 
computer program comprises instructions for the execution of a 
traceable encryption and/or decryption method according to claim 
16, when these instructions are executed by a decoder. 

28. (previously presented) A computer readable 
recording medium with a computer program recorded thereon, the 
computer program comprises instructions for the execution of a 
traceable data encryption and/or decryption method as in claim 
16, when said instructions are executed by a transmitter. 

29. (currently amended) A traceable system for 
encrypting and/or decrypting broadcast data capable of 
identifying a traitor, among different lawful users, who has 
communicated secret data to a non-authorized third party so that 
this third party is able to encrypt and/or decrypt the broadcast 
data, this system comprising: 

- a transmitter able to encrypt broadcast data, this 
transmitter being capable of applying at least a first secret 
cryptographic function, to directly process a message, then of 
broadcasting the message, 

- several decoders able to decrypt broadcast data, all 
the decoders being able to apply a second secret cryptographic 
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function identical to said first function or to its inverse for 
the direct processing of said broadcast message, each decoder for 
this purpose being equipped with a memory in which a mathematical 
description of said second function is recorded; 

wherein the memory of each decoder contains a 
mathematical description of said second function different from 
the one recorded in the memory of the other decoders or in the 
memory of the other groups of decoders so that this mathematical 
description exclusively identifies the particular decoder or 
group of decoders among all the decoders ; and 

wherein said mathematical description (F K j) recorded in 
the memory of each decoder is formed of several elementary 
functions (G j^j j which must be composed with each other in a 
determined order to form said second secret function . 

30. (previously presented) The memory intended to be 
associated with a decoder of a traceable data encryption and/or 
decryption system according to claim 28, wherein it comprises a 
mathematical description equivalent to said second secret 
function able to be used by the decoder, this mathematical 
description consisting of several elementary functions (G if j) 
each of which is equal to the composite of at least three 
functions as per one of the following equations : 

Gi,j = f 'i,j og CTj (1) OS 

G 2 ,j = f ' 2 , j og CTj (2 ) ofi, j 
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G r -l,j = f 'r-l,j Og oj (r _i) Of r _ 2 ,j 

G r , 3 = T og oj (r) Of r _i,j 
in which: 

- G if j is the -th elementary function of decoder j, j 
being the index identifying a decoder or group of decoders, 

- functions and f ' i ; j are predefined functions 
able to render the elementary functions Gi,j non-commutative 
between each other, 

- Oj is a permutation of all indices {1; r}unique to 
each decoder or group of decoders, 

- g CT j (t ) is the CTj(t) -th function of a predefined whole 
formed of r non-linear predefined functions gi commutative 
between each other, and 

- S and T are predefined functions able to render 
difficult the cryptanalysis of elementary functions G if j and G r ,j 
respectively . 

31. (previously presented) A computer readable 
recording medium with a computer program recorded thereon, the 
computer program comprises instructions for the execution of a 
traceable data encryption and/or decryption method as in claim 
17, when said instructions are executed by a transmitter. 
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32. (previously presented) A computer readable 
recording medium with a computer program recorded thereon, the 
computer program comprises instructions for the execution of a 
traceable data encryption and/or decryption method as in claim 

18, when said instructions are executed by a transmitter. 

33. (previously presented) A computer readable 
recording medium with a computer program recorded thereon, the 
computer program comprises instructions for the execution of a 
traceable data encryption and/or decryption method as in claim 

19, when said instructions are executed by a transmitter. 

34. (previously presented) A computer readable 
recording medium with a computer program recorded thereon, the 
computer program comprises instructions for the execution of a 
traceable data encryption and/or decryption method as in claim 

20, when said instructions are executed by a transmitter. 

35. (previously presented) A computer readable 
recording medium with a computer program recorded thereon, the 
computer program comprises instructions for the execution of a 
traceable data encryption and/or decryption method as in claim 

21, when said instructions are executed by a transmitter. 
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